John's Blog
Wednesday, January 21, 2004
  SSH2 Public Key Authentication Documentation
Jan 21, 2004


====================
= For Win XP/Putty =
====================

If you have a Win XP box named burgers and a Linux box named fries and
you want to ssh from burgers (using Putty) to fries w/o typing in
a password.

On burgers:
Run puttygen, and create 2048 bit SSH2 DSA Key.
With the mouse, copy the Key output.
Use an empty passphrase OR create a passphrase
Click "Save public key", and save as burgers.pub
Click "Save private key", and save as burgers.PPK
In the Putty Configuration for fries,
click on Connection -> SSH -> Auth,
in the Private Key file, Browse to your burgers.PPK file
check Open as read-only, and then click open
Save your Putty Configuration for fries

On fries:
cd .ssh
cat > burgers.pub
(now paste the Key Output & press ctrl-d to close the file)
make
(this simply adds burgers.pub to the authorized_keys2 file)

Now you should be able to ssh from burgers to fries w/o typing in a
password. If you see an error message about "Unable to load private
key", quit Putty and try again. This happened the first time I tried to
connect, but worked OK for subsequent connection attempts.

=============
= For Linux =
=============

If you have two Linux machines, billy and bob, and you want to ssh from
billy to bob w/o typing in a password.

On your billy box run,
make id_rsa
Use an empty passphrase OR create a passphrase
(this creates 2 files: ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub

On billy run,
scp id_rsa.pub username@bob:.ssh/billy.pub

On bob run,
cd ~/.ssh
make
(this simply adds billy.pub to the authorized_keys2 file)

Now you should be able to ssh from billy to bob w/o using a password.

========
= NOTE =
========

Windows/Putty likes DSA Keys when connecting to OpenSSH
Linux/OpenSSH likes RSA Keys when connecting to OpenSSH

-- end of README.txt

Makefile:

#
# Place this Makefile inside of your $HOME/.ssh directory
# You do not need a $HOME/.ssh2 directory nor do you need
# an authorized_keys file, just an authorized_keys2 file
#

PUBS=*.pub
AK2=authorized_keys2
IDEN_RSA=id_rsa
IDEN_DSA=id_dsa

$(AK2): $(PUBS)
cat $(PUBS) >| $(AK2)
chmod 600 $(AK2) $(PUBS)
chmod 700 .

# DSA is not really needed on Linux/OpenSSH, use RSA Keys instead
$(IDEN_DSA):
ssh-keygen -b 2048 -t dsa -f $(IDEN_DSA)
chmod 600 $(IDEN_DSA) $(IDEN_DSA).pub
chmod 700 .

$(IDEN_RSA):
ssh-keygen -b 2048 -t rsa -f $(IDEN_RSA)
chmod 600 $(IDEN_RSA) $(IDEN_RSA).pub
chmod 700 .

clean:
rm -f $(AK2) known_hosts
chmod 700 .

 
Wednesday, January 14, 2004
  BSD For Linux Users :: Intro: "BSD vs Linux "

It's been my impression that the BSD communit{y,ies}, in general, understand Linux far better than the Linux communit{y,ies} understand BSD. I have a few theories on why that is, but that's not really relevant. I think a lot of Linux people get turned off BSD because they don't really understand how and why it's put together. Thus, this rant; as a BSD person, I want to try to explain how BSD works in a way that Linux people can absorb.

 
Wednesday, January 07, 2004
  Awesome description of all raid levels, etc 
Technical Info, Notes, & Reminders

ARCHIVES
08/01/2003 - 09/01/2003 / 09/01/2003 - 10/01/2003 / 10/01/2003 - 11/01/2003 / 11/01/2003 - 12/01/2003 / 12/01/2003 - 01/01/2004 / 01/01/2004 - 02/01/2004 / 02/01/2004 - 03/01/2004 / 03/01/2004 - 04/01/2004 / 04/01/2004 - 05/01/2004 / 06/01/2004 - 07/01/2004 / 07/01/2004 - 08/01/2004 /


Powered by Blogger